On Mon, 7 Nov 2016, Kurt Seifried wrote:
: You have the values:
:
: Context-dependent
:
: Local
:
: Physical
:
: Remote
:
: which doesn't really map to anything like CVSSv2/3 directly, I'm just
: wondering where this is from?
VulnDB uses the same classifications, and for CVSSv2, Local and Remote
map. Context-dependent is handled as AV:N / AC:M to denote it requires
some interaction by the user. Generally, physical is handled with AV:L
/
AC:H.